mirror of
https://github.com/ivuorinen/actions.git
synced 2026-03-09 16:57:06 +00:00
Ismo Vuorinen
a0cc32995f
* feat(security): add OpenSSF Scorecard workflow and maximize score - Add scorecard.yml workflow (weekly + push to main) with SARIF upload - Add CONTRIBUTING.md for contributor guidelines - Add SLSA provenance attestation job to release workflow - Add CycloneDX SBOM generation job to release workflow - Pin Dockerfile base images to sha256 digests - Enable Renovate pinDigests and platformAutomerge - Add OpenSSF Scorecard badge to README * fix(docs): address PR #498 review comments and remove .coderabbit.yaml - Delete .coderabbit.yaml (falls back to shared org-level config) - Add missing linter deps to CONTRIBUTING.md install step - Separate make all and make test into distinct steps - Fix line length note to match EditorConfig (200 chars, no MD override) - Add yamllint/markdownlint to YAML/JSON/Markdown linter list - Refine action references guidance - Expand "Adding a New Action" section with action-docs and catalog info
37 lines
644 B
JSON
37 lines
644 B
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": [
|
|
"github>ivuorinen/renovate-config",
|
|
"customManagers:biomeVersions"
|
|
],
|
|
"pinDigests": true,
|
|
"platformAutomerge": true,
|
|
"packageRules": [
|
|
{
|
|
"matchUpdateTypes": [
|
|
"minor",
|
|
"patch"
|
|
],
|
|
"matchCurrentVersion": "!/^0/",
|
|
"automerge": true
|
|
},
|
|
{
|
|
"matchDepTypes": [
|
|
"devDependencies"
|
|
],
|
|
"automerge": true
|
|
}
|
|
],
|
|
"schedule": [
|
|
"before 4am on monday"
|
|
],
|
|
"vulnerabilityAlerts": {
|
|
"labels": [
|
|
"security"
|
|
],
|
|
"assignees": [
|
|
"ivuorinen"
|
|
]
|
|
}
|
|
}
|